# SHA1 error msgs from 'dnf update' (centos9.x)

**URL:** <https://discuss.elastic.co/t/sha1-error-msgs-from-dnf-update-centos9-x/337206>\
**Category:** Beats\
**Tags:** packetbeat, auditbeat\
**Created:** [June 29, 2023, 2:09pm UTC](https://discuss.elastic.co/t/sha1-error-msgs-from-dnf-update-centos9-x/337206 "2023-06-29T14:09:27Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ethrbunny](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ethrbunny/32/34603_2.png) [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Post date:** [June 29, 2023, 2:09pm UTC](https://discuss.elastic.co/t/sha1-error-msgs-from-dnf-update-centos9-x/337206/1 "2023-06-29T14:09:27Z")

</div>

Looks like elastic is signing 8.8.x \*beat package updates with SHA1. CentOS 9 doesn't support this anymore.

I can bypass it but maybe it's time to update these to something that's supported?

journal is chock full of errors from auditbeat, et al once these are installed.

> Importing GPG key 0xD88E42B4:  
> Userid : "Elasticsearch (Elasticsearch Signing Key) [dev\_ops@elasticsearch.org](mailto:dev_ops@elasticsearch.org)"  
> Fingerprint: 4609 5ACC 8548 582C 1A26 99A9 D27D 666C D88E 42B4  
> From : [https://artifacts.elastic.co/GPG-KEY-elasticsearch](https://artifacts.elastic.co/GPG-KEY-elasticsearch)  
> Is this ok [y/N]: y  
> warning: Signature not supported. Hash algorithm SHA1 not available.  
> Key import failed (code 2). Failing package is: packetbeat-8.8.2-1.x86\_64  
> GPG Keys are configured as: [https://artifacts.elastic.co/GPG-KEY-elasticsearch](https://artifacts.elastic.co/GPG-KEY-elasticsearch)  
> The downloaded packages were saved in cache until the next successful transaction.  
> You can remove cached packages by executing 'dnf clean packages'.  
> Error: GPG check FAILED

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [June 30, 2023, 2:10am UTC](https://discuss.elastic.co/t/sha1-error-msgs-from-dnf-update-centos9-x/337206/2 "2023-06-30T02:10:36Z")

</div>

This is being tracked in [rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch not working on centOS stream. gives a key import error. · Issue #85876 · elastic/elasticsearch · GitHub](https://github.com/elastic/elasticsearch/issues/85876).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 28, 2023, 4:10am UTC](https://discuss.elastic.co/t/sha1-error-msgs-from-dnf-update-centos9-x/337206/3 "2023-07-28T04:10:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.